Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: om5Mos6BoNmho+T40SeXZ2eNX1XyHamCdBydDFlmkAc=
Subject key identifier: DE:33:04:8F:1F:54:55:B8:67:F5:56:E2:BE:3F:6B:B7:20:4D:75:B1
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 0199FBEB1B122EA58195211BAA387B0479D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0CAB
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: oKnYxSqxF4Z7FoCZWFdLfJjwXNay3PO2KasPajfeUks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1b:12:2e:a5:81:95:21:1b:aa:38:7b:04:79:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=de33048f1f5455b867f556e2be3f6bb7204d75b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:eb:f9:9d:1e:47:0d:a7:17:24:a3:f4:9d:
be:8b:81:2e:7e:22:6d:2e:14:a8:13:40:9a:2a:63:
2d:8f:0e:fa:88:56:d2:c9:8b:d5:14:29:83:33:c6:
8f:3d:13:f3:72:96:5a:cc:a6:40:a0:ee:90:30:a0:
9f:47:db:74:a8:30:33:50:4a:e9:9c:76:98:4d:4a:
37:20:0a:37:50:bb:d5:b0:3d:99:41:2d:06:43:47:
55:19:f1:fd:d6:8d:f8:f0:4a:57:1b:88:c4:40:3b:
01:c9:7b:4e:d0:c3:ce:67:83:09:45:27:da:e9:b7:
de:5f:d0:46:34:9b:80:41:e1:60:e6:5c:91:bc:6f:
09:b8:20:aa:e4:c1:98:dc:da:c5:76:8d:4f:58:71:
46:45:7f:bd:84:34:da:0d:89:b3:3d:57:eb:01:ea:
de:4c:f4:e3:c6:5e:26:c1:0a:69:7f:e4:ff:1c:3b:
50:a1:a7:98:50:24:eb:f1:c9:1e:6f:3c:3f:9b:ca:
47:ac:ee:a2:be:05:5f:d8:0a:e6:1d:ff:eb:6c:83:
8f:48:f1:fe:49:50:f9:37:4f:7b:34:6f:e5:df:92:
47:18:dd:62:d1:56:a1:97:e4:9e:97:fa:38:c6:7e:
ee:95:d8:f7:8f:e2:10:09:b3:fd:6d:91:d1:5e:83:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:04:8F:1F:54:55:B8:67:F5:56:E2:BE:3F:6B:B7:20:4D:75:B1
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a0:27:6f:51:dc:a7:e8:63:82:17:ec:42:7f:d5:1a:f5:f1:
eb:95:1e:7f:cf:a6:90:53:09:7b:bb:54:10:bc:66:73:d6:ba:
39:41:f2:36:29:72:74:e6:96:b2:d8:7d:7b:ed:81:4c:09:bc:
9c:ef:ce:1e:ac:8b:74:06:d9:fa:4e:21:ad:a7:06:a7:b0:a0:
b2:1e:11:86:0a:74:19:bf:e6:e2:d8:d6:6a:a9:a0:44:ee:cf:
ab:ff:05:c8:0c:81:0b:1f:53:a4:29:a4:a6:27:10:49:77:63:
9a:2e:b0:1a:91:b9:f4:bf:a0:e3:61:ef:f9:6a:1b:37:86:8c:
31:0e:23:20:6a:1a:46:9a:92:6e:db:1c:68:f1:b2:74:23:89:
81:a5:aa:fe:81:3c:cb:b9:fe:a3:57:dd:5f:2c:be:a8:fb:0b:
8d:31:d7:38:fb:fe:bd:0d:5d:37:b6:21:6d:55:20:5b:70:f0:
23:74:ef:6f:98:fa:5e:a4:dd:1b:4f:c0:e6:a8:7d:69:59:38:
b5:8f:50:68:c3:c9:cf:ca:66:d0:e4:fb:7e:0e:2e:be:64:1c:
4c:71:b4:28:38:4c:51:86:7d:3a:7e:d5:d3:60:97:3a:63:89:
53:34:dd:a3:4c:60:a7:27:7a:c2:16:14:fd:32:2e:fd:f3:57:
66:2c:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:26 2025 by rpki-client